InternationalColorConsortium

Records113All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high61CVSS 7.0–8.9

Exploited now

InternationalColorConsortium records in CISA KEV

No InternationalColorConsortium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Iccdev 104 records HIGH Demoiccmax 6 records HIGH Icclib 2 records MEDIUM

Records

113 records

TI-2026-17458 CVE-2026-21675

iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion

HIGH 82

iccDEV provides a set of libraries and tools for working with ICC color management profiles.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0045 Published 2026-01-06 Fixed in 2.3.1.1 CWE-20

TI-2026-17462 CVE-2026-21679

iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

HIGH 76

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00383 Published 2026-01-07 Fixed in 2.3.1.2 CWE-20

TI-2026-19673 CVE-2026-24406

iccDEV has Heap Buffer Overflow in CIccTagNamedColor2::SetSize()

HIGH 73

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00626 Published 2026-01-24 Fixed in 2.3.1.2 CWE-122

TI-2026-18353 CVE-2026-22861

iccDEV has a heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

HIGH 73

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00709 Published 2026-01-13 Fixed in 2.3.1.2 CWE-120

TI-2026-17865 CVE-2026-22255

iccDEV has heap-buffer-overflow in CIccCLUT::Init() at IccProfLib/IccTagLut.cpp

HIGH 73

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00415 Published 2026-01-08 Fixed in 2.3.1.2 CWE-130

TI-2026-17741 CVE-2026-22047

iccDEV has heap-buffer-overflow in SIccCalcOp::Describe() at IccProfLib/IccMpeCalc.cpp

HIGH 73

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00381 Published 2026-01-07 Fixed in 2.3.1.2 CWE-130

TI-2026-17740 CVE-2026-22046

iccDEV has heap-buffer-overflow in CIccProfileXml::ParseBasic() at IccXML/IccLibXML/IccProfileXml.cpp

HIGH 73

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00336 Published 2026-01-07 Fixed in 2.3.1.2 CWE-130

TI-2026-17465 CVE-2026-21682

iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()

HIGH 73

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00368 Published 2026-01-07 Fixed in 2.3.1.2 CWE-122

TI-2026-17460 CVE-2026-21677

iccDEV has Undefined Behavior in CIccCLUT::Init()

HIGH 73

iccDEV provides a set of libraries and tools for working with ICC color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00371 Published 2026-01-06 Fixed in 2.3.1.1 CWE-20

TI-2026-17339 CVE-2026-21485

iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()

HIGH 73

iccDEV provides a set of libraries and tools for working with ICC color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00371 Published 2026-01-06 Fixed in 2.3.1.2 CWE-125

TI-2023-25104 CVE-2023-46602 · GHSA-2q9m-8wj3-95xg

In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer…

HIGH 73

In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/IccUtilXml.cpp in libIccXML.a.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00635 Published 2023-10-23 No fix listed CWE-787

TI-2026-19676 CVE-2026-24409

iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()

HIGH 71

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00373 Published 2026-01-24 Fixed in 2.3.1.2 CWE-20

TI-2026-19674 CVE-2026-24407

iccDEV has Undefined Behavior in icSigCalcOp()

HIGH 71

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00476 Published 2026-01-24 Fixed in 2.3.1.2 CWE-20

TI-2026-20734 CVE-2026-25634

iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2026-02-06 Fixed in 2.3.1.4 CWE-119

TI-2026-20692 CVE-2026-25585

iccDEV vulnerable to OOB in CIccXform3DLut::Apply()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2026-02-04 Fixed in 2.3.1.3 CWE-119

TI-2026-20691 CVE-2026-25584

iccDEV vulnerable to Stack-based Buffer Overflow in CIccTagFloatNum::GetValues()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00244 Published 2026-02-04 Fixed in 2.3.1.3 CWE-119

TI-2026-20690 CVE-2026-25583

iccDEV vulnerable to Heap Buffer Overflow in CIccFileIO::Read8()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00274 Published 2026-02-04 Fixed in 2.3.1.3 CWE-119

TI-2026-20689 CVE-2026-25582

iccDEV vulnerable to Heap Buffer Overflow in CIccIO::WriteUInt16Float()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00274 Published 2026-02-04 Fixed in 2.3.1.3 CWE-119

TI-2026-20613 CVE-2026-25502

iccDEV is vulnerable to stack-buffer-overflow in icFixXml()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0024 Published 2026-02-03 Fixed in 2.3.1.2 CWE-121

TI-2026-20055 CVE-2026-24856

iccDEV has UB runtime error in <icTagTypeSignature>

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0025 Published 2026-01-28 Fixed in 2.3.1.2 CWE-20

TI-2026-17461 CVE-2026-21678

iccDEV has heap-buffer-overflow vulnerability on IccTagXml()

HIGH 69

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00199 Published 2026-01-07 Fixed in 2.3.1.2 CWE-122

TI-2026-17359 CVE-2026-21505

iccDEV has Undefined Behavior (UB) - Invalid Enum Value

HIGH 67

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00201 Published 2026-01-07 Fixed in 2.3.1.2 CWE-20

TI-2026-17358 CVE-2026-21504

Heap Buffer Overflow in iccDEV ToneMap Parser

HIGH 67

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2026-01-07 Fixed in 2.3.1.2 CWE-122

TI-2026-17463 CVE-2026-21680

iccDEV has Null Pointer Dereference in CIccProfile::CheckTagTypes()

HIGH 66

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00316 Published 2026-01-07 Fixed in 2.3.1.2 CWE-476

TI-2026-22069 CVE-2026-27692

iccDEV has HBO in CIccTagTextDescription::Release()

MEDIUM 64

iccDEV provides a set of libraries and tools for working with ICC color management profiles.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00196 Published 2026-02-25 No fix listed CWE-125

Open these records in search →

Critical	3
High	61
Medium	49
Low	0
No CVSS	0